Google has revoked a critical permission to sync all files. (besides pictures and videos) Despite multiple appeals since mid-2024, Google has refused to reinstate it..
Google is stating security concerns as a reason for revoking the permission. This is hard to believe for us. Nextcloud has had this feature since its inception in 2016, and we have never heard about any security concerns from Google about it. Moreover, several Big Tech apps as well as Google’s own still have this. What we think: Google owning the platform means they can and are giving themselves preferential treatment.
The permission for read and write access to all file types for the Nextcloud Files app for Android was granted in 2011. In September 2024, an update of the Nextcloud app for Android was refused out of the blue. We have been asked to remove the permission to all files or use “a more privacy aware replacement” like Storage Access Framework (SAF) or MediaStore API.
SAF cannot be used, as it is for sharing/exposing our files to other apps, so the reviewer clearly misunderstood our app workflow. MediaStore API cannot be used as it does not allow access to other files, but only media files.
Despite multiple appeals from our side and sharing additional background, Google is not considering reinstating uploads for all files. Instead of working collaboratively to solve the issue, we only receive the same copy-and-paste answers or links to documentation. With nearly a million users and an 8-year history, it is hard to argue that our Android app has no credibility. So it is very surprising to get treated this way to the disadvantage of our users.
This might look like a small technical detail, but it is clearly part of a pattern of actions to fight the competition. What we are experiencing is a piece of the script from the Big Tech playbook.
The current oversight processes are absolutely useless against these billion-dollar companies. Even the fines against Meta and Apple under the Digital Markets Act (DMA) in April 2025 were surprisingly low. Remember, fines can be up to 10% of the company’s total worldwide annual revenue. While fines of €200 million or €500 million, respectively, sound a lot, it could have been in the billions. These Big Tech firms earn that much money in a matter of days, so it amounts to barely a slap on the wrist.
I’m not a fan of either Google or Apple, but this sort of thing is right out of the Apple playbook: undermine confidence in what is a viable and popular alternative.
So maybe that’s the reason why Nextcloud uploads always fail?
Guess we happily switch to F-Droid, then. Probably also start looking for a better Android… Their paternalism with permanently revoking carefully selected application rights is getting on my nerves anyway.
EDIT: Unbelieveable! Switched Nextcloud and Nextcloud Talk from G PlayStore to F-Droid, and now uploads suddenly work, despite both apps showing the same version! Has been disturbing me for more than half a year!
https://github.com/moneytoo/awesome-fdroid to quickly check if your favorite foss app available on F-Droid or not IMO if available on F-Droid then there is no reason to use PlayStore version.
BTW Syncthing offcial client is discontinued and F-Droid mentioned multiple times to their users via TWIF(This Week in F-Droid) to switch to Syncthing-Fork. See this TWIF.
Oops. Totally missed that one, although being subscribed to LinuxNews and others. Too many, maybe… Thanks again!
EDIT:
Syncthing-Fork running… missed 5 GB of photos, darn! Now syncing to my EOS laptop.
Too bad the original devs often get so demotivated by Apple, Google, or other Big Ones that they give up. And great we have FOSS, so good things can be continued!
I switched from syncthing to SMBsync2, this works for my usecase.
To get a bit more software on f-droid, I added Izzysofts F-Droid Repository to the app. https://apt.izzysoft.de/fdroid/
It’s a bit like using the AUR: “This is an F-Droid style repository for Android apps, provided by IzzyOnDroid. Applications in this repository are official binaries built by the original application developers, taken from their resp. repositories (mostly Github).”
Some applications also allow you to add their specific repositories to F-Droid, to ensure you’re always getting the latest version from the official source.
For example, adding the NewPipe repository to F-Droid:
There are lots of 3rd party repos and all depends on your threat model. But yeah IzzyOnDroid is the largest among them which also supports reproducible builds and many other enhanced security/usability features. The repo is maintained by well known IzzySoft(Andreas Itzchak Rehberg) who happens to be former maintainer of official F-Droid repo for a very long time.
@Bink Re: NewPipe. Do you happen to know if it supports Bandcamp payments? I like to buy FLAC albums there, and bands keep telling me they actually get the most of my payments on Bandcamp (as opposed to “the distributor keeps most of it”, like Amazon).
I’m not sure @Moonbase59. If what you’re referring to is something like a Bandcamp link in the YouTube description, that can open the Bandcamp app installed on your phone where payment can be made, then maybe?
No NewPipe doesn’t support login or payment to any supported sites. The subscription/playlist all related things are stored locally on your device only.
There is a german blog and forum for security and data safety topics. GrapheneOS is also recommended by Mike Kuketz.
You can use a translator if your german is not so good
Anyway interesting stuff to read.
F-Droid, would use only it if I didn’t need specific apps only published on Play Store
In addition to NewPipe there’s also GrayJay from Futo (Louis Rossmann) which supports a load of platforms inc YouTube, PeerTube, Odysee, Spotify, Soundcloud, but not BandCamp (yet) however as GrayJay is plugin based someone wrote their own BandCamp plugin. As well as casting to other devices (AirPlay, ChromeCast, FCast) they have a desktop version in beta for Win, Linux (AUR), macOS. Futo has its own F-Droid repository or you can install from APK downloaded directly from the Futo site.